| /external/selinux/libsepol/src/ |
| D | context.c | 93 char *scontext = NULL; in context_to_string() local
109 scontext = malloc(scontext_len); in context_to_string()
110 if (!scontext) in context_to_string()
112 scontext[scontext_len - 1] = '\0'; in context_to_string()
117 ptr = scontext; in context_to_string()
130 *result = scontext; in context_to_string()
136 free(scontext); in context_to_string()
149 context_struct_t *scontext = NULL; in context_from_record() local
160 scontext = (context_struct_t *) malloc(sizeof(context_struct_t)); in context_from_record()
161 if (!user || !role || !type || !scontext) { in context_from_record()
[all …]
|
| D | services.c | 384 static int constraint_expr_eval_reason(context_struct_t *scontext, in constraint_expr_eval_reason() argument
513 val1 = scontext->user; in constraint_expr_eval_reason()
519 val1 = scontext->type; in constraint_expr_eval_reason()
525 val1 = scontext->role; in constraint_expr_eval_reason()
554 l1 = &(scontext->range.level[0]); in constraint_expr_eval_reason()
560 l1 = &(scontext->range.level[0]); in constraint_expr_eval_reason()
566 l1 = &(scontext->range.level[1]); in constraint_expr_eval_reason()
572 l1 = &(scontext->range.level[1]); in constraint_expr_eval_reason()
578 l1 = &(scontext->range.level[0]); in constraint_expr_eval_reason()
579 l2 = &(scontext->range.level[1]); in constraint_expr_eval_reason()
[all …]
|
| D | mls.c | 168 const context_struct_t * context, char **scontext) in mls_sid_to_context() argument
178 scontextp = *scontext; in mls_sid_to_context()
250 *scontext = scontextp; in mls_sid_to_context()
330 char oldc, char **scontext, context_struct_t * context) in mls_context_to_sid() argument
347 scontextp = p = *scontext; in mls_context_to_sid()
442 *scontext = ++p; in mls_context_to_sid()
604 const context_struct_t * scontext, in mls_compute_sid() argument
620 rtr.source_type = scontext->type; in mls_compute_sid()
635 return mls_context_cpy_low(newcontext, scontext); in mls_compute_sid()
637 return mls_context_cpy_high(newcontext, scontext); in mls_compute_sid()
[all …]
|
| D | mls.h | 46 char **scontext);
51 char **scontext, context_struct_t * context);
60 const context_struct_t * scontext,
|
| /external/selinux/python/sepolgen/src/sepolgen/ |
| D | audit.py | 173 self.scontext = refpolicy.SecurityContext()
228 self.scontext = refpolicy.SecurityContext(fields[1])
254 scontext = self.scontext.to_string()
258 if (scontext, tcontext, self.tclass, access_tuple) in avcdict.keys():
259 self.type, self.data = avcdict[(scontext, tcontext, self.tclass, access_tuple)]
261 self.type, self.data = audit2why.analyze(scontext, tcontext, self.tclass, self.accesses)
267 raise ValueError("Invalid Source Context %s\n" % scontext)
277 if self.scontext.user != self.tcontext.user:
278 … self.data.append(("user (%s)" % self.scontext.user, 'user (%s)' % self.tcontext.user))
279 if self.scontext.role != self.tcontext.role and self.tcontext.role != "object_r":
[all …]
|
| /external/selinux/python/sepolgen/tests/test_data/ |
| D | httpd.log | 1 …ber=DeviceActivationStage dest=org.freedesktop.DBus spid=6687 tpid=3866 scontext=staff_u:staff_r:s…
2 …ber=DeviceActivationStage dest=org.freedesktop.DBus spid=6687 tpid=3866 scontext=staff_u:staff_r:s…
3 …anager member=StateChange dest=org.freedesktop.DBus spid=6687 tpid=3866 scontext=staff_u:staff_r:s…
4 …anager member=StateChange dest=org.freedesktop.DBus spid=6687 tpid=3866 scontext=staff_u:staff_r:s…
5 …er=DeviceActivationFailed dest=org.freedesktop.DBus spid=6687 tpid=3866 scontext=staff_u:staff_r:s…
6 …ber=DeviceActivationStage dest=org.freedesktop.DBus spid=6687 tpid=3866 scontext=staff_u:staff_r:s…
7 …ber=DeviceActivationStage dest=org.freedesktop.DBus spid=6687 tpid=3866 scontext=staff_u:staff_r:s…
8 …anager member=StateChange dest=org.freedesktop.DBus spid=6687 tpid=3866 scontext=staff_u:staff_r:s…
9 …r member=DeviceActivating dest=org.freedesktop.DBus spid=6687 tpid=3866 scontext=staff_u:staff_r:s…
10 …r=getProperties dest=org.freedesktop.NetworkManager spid=3866 tpid=6687 scontext=staff_u:staff_r:s…
[all …]
|
| D | audit.log | 1 …or pid=6314 comm="pam_timestamp_c" name="[96391]" dev=pipefs ino=96391 scontext=staff_u:staff_r:p…
4 … } for pid=6306 comm="beagled" name=".gdmDOM7HT" dev=dm-0 ino=14469552 scontext=staff_u:staff_r:s…
6 …d=6306 comm="beagled" name="max_user_instances" dev=proc ino=-268435218 scontext=staff_u:staff_r:s…
8 …ock-applet" name="bonobo-activation-register.lock" dev=dm-0 ino=5434689 scontext=staff_u:staff_r:s…
10 …ock-applet" name="bonobo-activation-register.lock" dev=dm-0 ino=5434689 scontext=staff_u:staff_r:s…
15 …d { search } for pid=6377 comm="su" name="root" dev=dm-0 ino=13127137 scontext=staff_u:staff_r:s…
17 …te } for pid=6378 comm="xauth" name=".gdmDOM7HT" dev=dm-0 ino=14469552 scontext=staff_u:staff_r:s…
19 …ad } for pid=6378 comm="xauth" name=".gdmDOM7HT" dev=dm-0 ino=14469552 scontext=staff_u:staff_r:s…
21 …tr } for pid=6378 comm="xauth" name=".gdmDOM7HT" dev=dm-0 ino=14469552 scontext=staff_u:staff_r:s…
24 …ed { write } for pid=6377 comm="su" name="root" dev=dm-0 ino=13127137 scontext=staff_u:staff_r:s…
[all …]
|
| D | short.log | 1 …or pid=6314 comm="pam_timestamp_c" name="[96391]" dev=pipefs ino=96391 scontext=staff_u:staff_r:p…
4 … } for pid=6306 comm="beagled" name=".gdmDOM7HT" dev=dm-0 ino=14469552 scontext=staff_u:staff_r:s…
6 …d=6306 comm="beagled" name="max_user_instances" dev=proc ino=-268435218 scontext=staff_u:staff_r:s…
8 …ock-applet" name="bonobo-activation-register.lock" dev=dm-0 ino=5434689 scontext=staff_u:staff_r:s…
10 …ock-applet" name="bonobo-activation-register.lock" dev=dm-0 ino=5434689 scontext=staff_u:staff_r:s…
15 …d { search } for pid=6377 comm="su" name="root" dev=dm-0 ino=13127137 scontext=staff_u:staff_r:s…
|
| /external/selinux/python/sepolgen/tests/ |
| D | test_audit.py | 75 self.assertEqual(avc.scontext, sc)
85 self.assertEqual(avc.scontext.user, "user_u")
86 self.assertEqual(avc.scontext.role, "system_r")
87 self.assertEqual(avc.scontext.type, "unconfined_t")
88 self.assertEqual(avc.scontext.level, "s0")
131 self.assertEqual(avc.scontext.user, "user_u")
132 self.assertEqual(avc.scontext.role, "system_r")
133 self.assertEqual(avc.scontext.type, "bluetooth_helper_t")
134 self.assertEqual(avc.scontext.level, "s0-s0:c0")
155 self.assertEqual(avc.scontext.user, "user_u")
[all …]
|
| D | audit.txt | 1 … avc: denied { dac_read_search } for pid=8132 comm="sh" capability=2 scontext=user_u:system_r:v…
3 … denied { dac_override } for pid=8133 comm="vpnc-script" capability=1 scontext=user_u:system_r:v…
4 …nied { dac_read_search } for pid=8133 comm="vpnc-script" capability=2 scontext=user_u:system_r:v…
6 … denied { dac_override } for pid=8134 comm="vpnc-script" capability=1 scontext=user_u:system_r:v…
7 …nied { dac_read_search } for pid=8134 comm="vpnc-script" capability=2 scontext=user_u:system_r:v…
9 …1): avc: denied { dac_override } for pid=8144 comm="sh" capability=1 scontext=user_u:system_r:v…
10 … avc: denied { dac_read_search } for pid=8144 comm="sh" capability=2 scontext=user_u:system_r:v…
12 … denied { dac_override } for pid=8145 comm="vpnc-script" capability=1 scontext=user_u:system_r:v…
13 …nied { dac_read_search } for pid=8145 comm="vpnc-script" capability=2 scontext=user_u:system_r:v…
15 … denied { dac_override } for pid=8146 comm="vpnc-script" capability=1 scontext=user_u:system_r:v…
[all …]
|
| /external/selinux/python/audit2allow/ |
| D | test.log | 2 … avc: denied { write } for comm=local dev=dm-0 name=root.lock pid=10581 scontext=system_u:system_r…
5 …} for pid=13944 comm="automount" name="auto.net" dev=dm-0 ino=16483485 scontext=system_u:system_r…
7 …44:851): avc: denied { name_bind } for pid=21134 comm="httpd" src=81 scontext=system_u:system_r…
9 …:852): avc: denied { name_connect } for pid=21134 comm="smbd" src=81 scontext=system_u:system_r…
11 … search } for pid=24427 comm="vsftpd" name="home" dev=dm-0 ino=9338881 scontext=system_u:system_r…
13 …852): avc: denied { name_connect } for pid=21134 comm="httpd" src=81 scontext=system_u:system_r…
16 …ns } for pid=23768 comm="httpd" name="index.html" dev=dm-0 ino=7996439 scontext=system_u:system_r…
18 …853): avc: denied { name_connect } for pid=21134 comm="httpd" src=81 scontext=system_u:system_r…
20 …853): avc: denied { name_connect } for pid=21134 comm="httpd" src=81 scontext=system_u:system_r…
23 …ecute } for pid=23770 comm="httpd" name="cgi-bin" dev=dm-0 ino=7995597 scontext=system_u:system_r…
[all …]
|
| /external/perfetto/src/traced/probes/ftrace/test/data/android_raven_AOSP.MASTER_5.10.43/events/avc/selinux_audited/ |
| D | format | 13 field:__data_loc char[] scontext; offset:24; size:4; signed:0;
17 …dited=0x%x result=%d scontext=%s tcontext=%s tclass=%s", REC->requested, REC->denied, REC->audited…
|
| /external/selinux/gui/ |
| D | fcontextPage.py | 35 def __init__(self, scontext): argument
36 self.scontext = scontext
37 con = scontext.split(":")
45 return self.scontext
158 scontext = store.get_value(iter, TYPE_COL)
159 scon = context(scontext)
|
| /external/cpuinfo/test/dmesg/ |
| D | nexus6p.log | 1256 …n } for pid=1 comm="init" path="/sys/kernel/debug" dev="debugfs" ino=1 scontext=u:r:init:s0 tcont…
1416 …65.336:5): avc: granted { setsched } for pid=409 comm="irq/449-wcd9xxx" scontext=u:r:kernel:s0 tco…
1424 …65.420:6): avc: granted { setsched } for pid=435 comm="irq/215-fc38800" scontext=u:r:kernel:s0 tco…
1436 …nied { unlink } for pid=1 comm="init" name="diag" dev="tmpfs" ino=11922 scontext=u:r:init:s0 tcont…
1509 …t(2924765.633:8): avc: granted { setsched } for pid=451 comm="mdss_fb0" scontext=u:r:kernel:s0 tco…
1560 …for pid=497 comm="e2fsck" path="/dev/block/zram0" dev="tmpfs" ino=12008 scontext=u:r:vold:s0 tcont…
1624 …ite } for pid=525 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=11922 scontext=u:r:ims:s0 tconte…
1625 …ite } for pid=525 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=11922 scontext=u:r:ims:s0 tconte…
1626 …ite } for pid=525 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=11922 scontext=u:r:ims:s0 tconte…
1627 …ite } for pid=525 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=11922 scontext=u:r:ims:s0 tconte…
[all …]
|
| D | xiaomi-mi-5c.log | 1103 …274.543:4): avc: denied { create } for pid=1 comm="init" name="cust" scontext=u:r:init:s0 tcont…
1193 …id=214 comm="e2fsck" path="/dev/block/mmcblk0p15" dev="tmpfs" ino=12378 scontext=u:r:fsck:s0 tcont…
1194 …id=214 comm="e2fsck" path="/dev/block/mmcblk0p15" dev="tmpfs" ino=12378 scontext=u:r:fsck:s0 tcont…
1195 …te } for pid=214 comm="e2fsck" name="mmcblk0p15" dev="tmpfs" ino=12378 scontext=u:r:fsck:s0 tcont…
1253 …ied { relabelto } for pid=1 comm="init" name="/" dev="mmcblk0p15" ino=2 scontext=u:r:init:s0 tcont…
1255 … { relabelto } for pid=1 comm="init" name="app" dev="mmcblk0p15" ino=11 scontext=u:r:init:s0 tcont…
1260 …belto } for pid=1 comm="init" name="customized" dev="mmcblk0p15" ino=12 scontext=u:r:init:s0 tcont…
1261 …for pid=1 comm="init" name="ota-miui-BBS_MSITE" dev="mmcblk0p15" ino=13 scontext=u:r:init:s0 tcont…
1262 …pid=1 comm="init" name="ota-miui-BBS_MSITE.apk" dev="mmcblk0p15" ino=14 scontext=u:r:init:s0 tcont…
1263 … pid=1 comm="init" name="ota-miui-GlobalMiShop" dev="mmcblk0p15" ino=15 scontext=u:r:init:s0 tcont…
[all …]
|
| D | moto-g-gen5.log | 719 …unton } for uid=0 pid=1 comm="init" path="/oem" dev="mmcblk0p51" ino=2 scontext=u:r:init:s0 tcont…
958 …id=1000 pid=551 comm="surfaceflinger" name="diag" dev="tmpfs" ino=17465 scontext=u:r:surfaceflinge…
1109 … uid=1000 pid=720 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=17465 scontext=u:r:ims:s0 tconte…
1115 …for uid=0 pid=760 comm="te-qdev-adsp" name="diag" dev="tmpfs" ino=17465 scontext=u:r:thermal-engin…
1119 …r uid=1000 pid=830 comm="time_daemon" name="diag" dev="tmpfs" ino=17465 scontext=u:r:time_daemon:s…
1121 …r uid=1000 pid=838 comm="cnss-daemon" name="diag" dev="tmpfs" ino=17465 scontext=u:r:wcnss_service…
1135 …uid=1000 pid=714 comm="wcnss_service" name="diag" dev="tmpfs" ino=17465 scontext=u:r:wcnss_service…
1143 …ite } for uid=1000 pid=712 comm="cnd" name="diag" dev="tmpfs" ino=17465 scontext=u:r:cnd:s0 tconte…
1150 …uid=1000 pid=862 comm="imsdatadaemon" name="diag" dev="tmpfs" ino=17465 scontext=u:r:ims:s0 tconte…
1151 …or uid=1000 pid=882 comm="ipacm-diag" name="diag" dev="tmpfs" ino=17465 scontext=u:r:ipacm-diag:s0…
[all …]
|
| D | nexus5x.log | 1089 …write } for pid=1 comm="init" name="tracing_on" dev="debugfs" ino=5685 scontext=u:r:init:s0 tcont…
1191 …rite } for pid=391 comm="rmt_storage" name="rmts" dev="debugfs" ino=344 scontext=u:r:rmt:s0 tconte…
1209 …nied { unlink } for pid=1 comm="init" name="diag" dev="tmpfs" ino=10499 scontext=u:r:init:s0 tcont…
1390 …ite } for pid=499 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=10499 scontext=u:r:ims:s0 tconte…
1391 …ite } for pid=499 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=10499 scontext=u:r:ims:s0 tconte…
1392 …ite } for pid=499 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=10499 scontext=u:r:ims:s0 tconte…
1393 …ite } for pid=499 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=10499 scontext=u:r:ims:s0 tconte…
1394 …ite } for pid=499 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=10499 scontext=u:r:ims:s0 tconte…
1395 …ite } for pid=499 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=10499 scontext=u:r:ims:s0 tconte…
1401 …ite } for pid=499 comm="imsqmidaemon" name="diag" dev="tmpfs" ino=10499 scontext=u:r:ims:s0 tconte…
[all …]
|
| D | alcatel-revvl.log | 94 …ed { set } for property=ro.mtk_pq_color_mode pid=468 uid=1013 gid=1005 scontext=u:r:mediaserver:s…
96 …t } for property=persist.sys.pq.mdp.color.dbg pid=468 uid=1013 gid=1005 scontext=u:r:mediaserver:s…
98 … denied { set } for property=debug.pq.shp.en pid=468 uid=1013 gid=1005 scontext=u:r:mediaserver:s…
100 …denied { set } for property=debug.pq.dshp.en pid=468 uid=1013 gid=1005 scontext=u:r:mediaserver:s…
102 …t } for property=persist.sys.pq.mdp.color.idx pid=468 uid=1013 gid=1005 scontext=u:r:mediaserver:s…
104 … { set } for property=persist.sys.pq.adl.idx pid=468 uid=1013 gid=1005 scontext=u:r:mediaserver:s…
106 … set } for property=persist.sys.pq.iso.shp.en pid=468 uid=1013 gid=1005 scontext=u:r:mediaserver:s…
143 …d { search } for pid=1386 comm="mtkrild" name="/" dev="mmcblk0p7" ino=2 scontext=u:r:mtkrild:s0 tc…
175 …for pid=1524 comm="rilproxy" path="/proc/ged" dev="proc" ino=4026533840 scontext=u:r:rilproxy:s0 t…
290 …h="/sys/devices/system/cpu/cpu5/topology/core_id" dev="sysfs" ino=17883 scontext=u:r:adbd:s0 tcont…
[all …]
|
| D | pixel.log | 1209 … search } for pid=446 comm="qseecomd" name="firmware" dev="dm-0" ino=25 scontext=u:r:tee:s0 tconte…
1246 …arch } for pid=458 comm="nanoapp_cmd" name="firmware" dev="dm-0" ino=25 scontext=u:r:nanoapp_cmd:s…
1247 …arch } for pid=458 comm="nanoapp_cmd" name="firmware" dev="dm-0" ino=25 scontext=u:r:nanoapp_cmd:s…
1248 …arch } for pid=458 comm="nanoapp_cmd" name="firmware" dev="dm-0" ino=25 scontext=u:r:nanoapp_cmd:s…
1288 …(6133887.240:8): avc: denied { create } for pid=270 comm="kworker/u8:5" scontext=u:r:kernel:s0 tco…
1376 …(6133887.370:9): avc: denied { create } for pid=268 comm="kworker/u8:3" scontext=u:r:kernel:s0 tco…
1405 …h } for pid=505 comm="surfaceflinger" name="firmware" dev="dm-0" ino=25 scontext=u:r:surfaceflinge…
1406 …h } for pid=505 comm="surfaceflinger" name="firmware" dev="dm-0" ino=25 scontext=u:r:surfaceflinge…
1407 …h } for pid=505 comm="surfaceflinger" name="firmware" dev="dm-0" ino=25 scontext=u:r:surfaceflinge…
1408 …h } for pid=505 comm="surfaceflinger" name="firmware" dev="dm-0" ino=25 scontext=u:r:surfaceflinge…
[all …]
|
| D | pixel-xl.log | 1198 …write } for pid=1 comm="init" name="tracing_on" dev="debugfs" ino=8269 scontext=u:r:init:s0 tcont…
1263 … search } for pid=437 comm="qseecomd" name="firmware" dev="dm-0" ino=25 scontext=u:r:tee:s0 tconte…
1274 …arch } for pid=448 comm="nanoapp_cmd" name="firmware" dev="dm-0" ino=25 scontext=u:r:nanoapp_cmd:s…
1275 …arch } for pid=448 comm="nanoapp_cmd" name="firmware" dev="dm-0" ino=25 scontext=u:r:nanoapp_cmd:s…
1276 …arch } for pid=448 comm="nanoapp_cmd" name="firmware" dev="dm-0" ino=25 scontext=u:r:nanoapp_cmd:s…
1333 …13234145.446:9): avc: denied { create } for pid=257 comm="kworker/u8:5" scontext=u:r:kernel:s0 tco…
1413 …13234145.686:10): avc: denied { create } for pid=43 comm="kworker/u8:1" scontext=u:r:kernel:s0 tco…
1439 …h } for pid=490 comm="surfaceflinger" name="firmware" dev="dm-0" ino=25 scontext=u:r:surfaceflinge…
1440 …h } for pid=490 comm="surfaceflinger" name="firmware" dev="dm-0" ino=25 scontext=u:r:surfaceflinge…
1441 …h } for pid=490 comm="surfaceflinger" name="firmware" dev="dm-0" ino=25 scontext=u:r:surfaceflinge…
[all …]
|
| D | moto-g-gen3.log | 839 [ 4.676043,3] init: avc: granted { set } for property=net.tethering.on scontext=u:r:netd:s0 tc…
1009 …m="Binder_1" path="socket:[14408]" dev="sockfs" ino=14408 ioctlcmd=7704 scontext=u:r:surfaceflinge…
1010 …m="Binder_1" path="socket:[14408]" dev="sockfs" ino=14408 ioctlcmd=7704 scontext=u:r:surfaceflinge…
1036 …m="Binder_2" path="socket:[16946]" dev="sockfs" ino=16946 ioctlcmd=7704 scontext=u:r:surfaceflinge…
1037 …m="Binder_2" path="socket:[16946]" dev="sockfs" ino=16946 ioctlcmd=7704 scontext=u:r:surfaceflinge…
1064 …m="Binder_1" path="socket:[12640]" dev="sockfs" ino=12640 ioctlcmd=7704 scontext=u:r:surfaceflinge…
1065 …m="Binder_1" path="socket:[12640]" dev="sockfs" ino=12640 ioctlcmd=7704 scontext=u:r:surfaceflinge…
1070 …m="Binder_2" path="socket:[14138]" dev="sockfs" ino=14138 ioctlcmd=7704 scontext=u:r:surfaceflinge…
1071 …m="Binder_2" path="socket:[14138]" dev="sockfs" ino=14138 ioctlcmd=7704 scontext=u:r:surfaceflinge…
1093 …m="Binder_2" path="socket:[17483]" dev="sockfs" ino=17483 ioctlcmd=7704 scontext=u:r:surfaceflinge…
[all …]
|
| /external/selinux/libselinux/src/ |
| D | is_customizable_type.c | 64 int is_context_customizable(const char * scontext) in is_context_customizable() argument
74 c = context_new(scontext); in is_context_customizable()
|
| D | matchpathcon.c | 553 char * scontext = NULL; in selinux_lsetfilecon_default() local
562 if (selabel_lookup_raw(hnd, &scontext, path, st.st_mode)) { in selinux_lsetfilecon_default()
566 rc = lsetfilecon_raw(path, scontext); in selinux_lsetfilecon_default()
567 freecon(scontext); in selinux_lsetfilecon_default()
|
| /external/selinux/libsepol/include/sepol/policydb/ |
| D | services.h | 151 sepol_security_context_t * scontext, /* OUT */
158 extern int sepol_context_to_sid(sepol_const_security_context_t scontext, /* IN */
|
| /external/selinux/checkpolicy/ |
| D | checkpolicy.c | 132 sepol_security_context_t scontext; in print_sid() local
136 rc = sepol_sid_to_context(sid, &scontext, &scontext_len); in print_sid()
140 printf("sid %d -> scontext %s\n", sid, scontext); in print_sid()
141 free(scontext); in print_sid()
387 sepol_security_context_t scontext; in main() local
830 &scontext, &scontext_len); in main()
833 printf("\nscontext %s\n", scontext); in main()
834 free(scontext); in main()
|